Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: aXON4Xyw+ol40Atwfg5hsAGdDNYDRXpuG4s//p1c06M=
Subject key identifier: 9A:08:5B:EF:ED:4A:19:40:9B:33:A8:3E:76:71:DB:BC:45:CF:F2:48
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 01974EC504A4E94C125397A5F925D7DF4B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 128E
Signing time: Sun 08 Jun 2025 09:00:24 +0000
Manifest this update: Sun 08 Jun 2025 09:00:24 +0000
Manifest next update: Mon 09 Jun 2025 09:00:24 +0000
Files and hashes: 1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=)
2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: ttc9Pz2L8pOAejKQI4nX6+wt9nHxvgc5/6n7ExBH994=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:04:a4:e9:4c:12:53:97:a5:f9:25:d7:df:4b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Jun 8 09:00:24 2025 GMT
Not After : Jun 9 09:00:24 2025 GMT
Subject: CN=9a085befed4a19409b33a83e7671dbbc45cff248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:78:ba:b1:ab:a8:d4:b9:7f:54:91:48:17:30:
6a:25:41:ef:7b:ef:f6:2a:c3:51:c3:89:2e:3d:bf:
53:4a:a9:55:09:d5:d1:64:5d:88:24:17:60:68:d7:
17:af:37:ab:ff:c6:65:eb:aa:a2:fe:a5:e7:cb:fa:
69:75:f8:ad:1d:be:1f:e3:61:85:34:76:8e:a0:12:
75:a5:2f:cc:c7:e7:de:40:07:27:e4:c6:5b:9b:3c:
1e:5a:a0:15:38:1b:6a:48:38:27:e8:f4:8d:8d:cb:
fb:2c:9a:f4:71:e3:a5:c3:d2:6f:59:ff:be:3f:26:
24:db:57:ff:5f:7c:3e:f3:40:71:d5:47:c8:6c:48:
9b:53:4b:50:c0:c0:81:1a:f9:ec:0c:d6:b9:df:88:
97:a3:f9:d6:1e:06:f4:cd:1f:6b:38:79:38:54:90:
c3:a2:d2:fb:ab:a2:d0:7c:86:5a:c9:b3:6b:81:3b:
db:56:8f:cb:db:71:38:34:48:1f:9f:64:cd:55:b5:
5c:ff:61:00:de:2c:4d:ce:df:d0:6c:2c:77:b8:8e:
cb:d9:99:21:b0:75:61:cc:71:7f:16:89:3d:d3:6f:
67:1a:ee:39:78:93:a2:6b:c7:72:00:fa:e8:83:a6:
85:61:9a:e1:56:9c:a6:cf:e4:b0:8d:fc:c6:9d:f8:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:08:5B:EF:ED:4A:19:40:9B:33:A8:3E:76:71:DB:BC:45:CF:F2:48
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:45:ba:59:87:52:97:ce:d1:dc:91:cd:14:9d:c2:e0:4a:8b:
ae:76:83:0c:a2:54:13:f6:3e:d8:1d:56:95:30:b3:3f:02:ed:
21:dc:86:f7:a4:42:af:f4:e0:c8:6b:84:e7:44:0e:5c:a0:f9:
01:2a:ff:46:f3:04:f0:b7:bc:39:c6:c5:19:14:f8:08:94:96:
bf:9b:b9:7d:f4:46:15:64:bd:4e:a9:2b:8e:de:89:a7:38:75:
70:d8:2e:5a:a9:14:8a:a9:19:90:a0:10:df:2d:1a:a8:e3:b6:
71:f8:89:2f:ce:ed:2b:3b:57:63:14:03:b8:e1:21:40:cf:31:
2c:2b:c7:83:66:b5:b1:07:2c:d0:14:7c:26:62:54:c1:cc:b6:
0f:8f:0e:27:32:63:ad:f9:fe:1b:49:2a:6d:70:89:9e:00:14:
a9:c9:97:e7:5b:ef:1f:a2:6e:e0:90:60:78:36:99:cc:73:1b:
ba:f1:ab:74:cf:23:76:27:f0:07:e2:91:de:fb:49:dc:68:26:
1b:07:69:9b:1e:39:bc:9b:ee:2c:db:a5:2a:8c:e0:d5:22:ff:
2d:3f:d5:82:20:ac:63:25:f1:f7:52:cc:64:9c:8f:a1:34:4e:
c1:0c:ac:2a:47:22:66:e5:b5:c2:85:b3:14:92:c1:d7:35:7d:
cf:a8:f6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:06:27 2025 by rpki-client